Privacy Notice

1. Data controller

VowCraft is operated by Maria Foti, who acts as the data controller for your personal data. This notice explains what we collect, why, and your rights over it.

2. What we collect & why

• Account data (name, email, login credentials) — to create and secure your account (contract performance).
• Planning content (guests, budget, vendors, tasks, moodboards, uploaded files) — to provide the service (contract performance).
• Support messages — to respond to your requests (legitimate interests).
• Usage & telemetry (device identifiers, IP address, usage patterns) — for security, fraud prevention, and product improvement (legitimate interests).

Payment data is collected and processed directly by Paddle, our Merchant of Record; we never see or store your card details.

3. Who we share data with

• Service providers/subprocessors — hosting, database, analytics, and email tooling that help us run the service;
• Paddle — as Merchant of Record, for the sale of the product, payments, tax compliance, and invoicing;
• Professional advisers (legal, accounting) where needed;
• Authorities — where required by law.

4. Retention

We keep your data for as long as your account is active and for a reasonable period afterwards. Data is deleted or anonymised when no longer needed.

5. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent at any time. You can exercise these rights from the Account page (export or erase) or by contacting us. You also have the right to complain to your supervisory authority. We respond within 1 month.

6. International transfers

Some subprocessors may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Security & cookies

We apply appropriate technical and organisational measures, including encryption in transit and access controls. We use essential cookies (authentication) and may use analytics cookies; you can manage cookie preferences in your browser.